$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft File: 9_nYpDVdZzudTn8VXTp45eZg_qU.mft (raw, json) Hash identifier: Qr4qO+YotiY0KvI0dUVNZYcWq6WRWOeyg26w4z+7Oj0= Subject key identifier: C0:D0:92:BB:8D:6E:53:D5:A4:7A:2A:BB:53:0B:B6:5D:67:A6:B3:93 Authority key identifier: F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 Certificate issuer: /CN=A9136DD6/serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5 Certificate serial: 03E0 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft Manifest number: 03DA Signing time: Fri 24 May 2024 18:14:19 +0000 Manifest this update: Fri 24 May 2024 18:14:19 +0000 Manifest next update: Fri 31 May 2024 18:14:19 +0000 Files and hashes: 1: 9_nYpDVdZzudTn8VXTp45eZg_qU.crl (hash: 3dZGy0Fsk8ENle25Eipt4jmnLpBBxwI8+A4jLsbXuwQ=) 2: 53647CC8284511EE8A9EF045C4F9AE02.roa (hash: q6T+3SeSLwQ46z2e+jiP9jZoRgXBN3CYjsUf9Ldx12E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 14:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 992 (0x3e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6/serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5 Validity Not Before: May 24 18:14:19 2024 GMT Not After : May 31 18:14:19 2024 GMT Subject: CN=6650d8fb-61af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3a:c3:d5:06:98:83:05:a0:3c:32:b0:5f:08: 13:34:46:7c:19:ec:2d:0b:f1:d5:08:d0:da:14:4c: 54:11:87:52:a8:07:6b:4b:92:2b:6e:09:34:89:3e: db:a6:31:f6:d1:b7:38:75:fe:f1:27:7b:a3:28:13: 2a:05:21:d1:8b:e6:f9:cd:97:c5:d3:e5:2e:dc:13: 96:95:91:de:ce:20:ee:ba:53:d6:32:53:fe:ac:99: 45:c1:ce:e5:ab:39:f3:e1:78:c5:23:19:b2:95:c2: c2:65:77:37:8e:34:59:50:1b:c0:e3:4a:0f:63:0c: 6c:6b:9f:f5:ff:14:9a:38:01:9f:4d:a8:ca:b8:4a: 99:bd:94:f2:5e:da:5d:01:23:65:26:74:57:e7:d6: 72:8a:bd:1b:28:01:29:df:22:f2:51:4a:41:a1:b6: 56:87:3d:6b:35:d7:01:41:12:5d:3b:32:7d:ab:a6: 95:c4:9f:93:a7:00:3b:ce:b2:6d:16:1e:96:f5:5d: bc:0e:bc:d7:df:4d:3f:22:17:52:b2:87:c7:63:9c: 6a:f0:b7:ef:4f:31:1c:1e:60:49:16:c0:9d:33:68: 9b:04:16:fc:82:df:21:6b:85:49:75:9a:80:93:0c: 3f:b2:d3:1d:07:45:d9:fb:cb:12:c4:17:57:2b:a9: 73:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D0:92:BB:8D:6E:53:D5:A4:7A:2A:BB:53:0B:B6:5D:67:A6:B3:93 X509v3 Authority Key Identifier: keyid:F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:32:b7:d0:94:9a:14:d4:e2:ef:e7:91:d6:7a:df:7c:c8:b5: 0b:e2:8a:c1:6c:db:46:2c:2c:bc:17:c7:66:0c:95:09:00:02: 12:6e:99:7b:5d:ae:b7:71:8b:fc:ed:1d:39:d4:75:7a:a9:d0: a7:f7:07:46:f0:52:52:ba:c3:63:d0:f6:d3:6e:80:d2:3e:c8: c7:91:0c:af:10:49:aa:36:cf:b2:80:8f:c8:a6:74:9a:75:cf: a3:fd:ab:21:6f:1b:c4:a6:0d:0c:53:b0:93:74:23:72:68:d6: ea:24:fa:7d:3b:de:96:70:4c:62:d9:98:4b:df:dd:31:66:35: 51:7b:3c:44:97:7a:0f:6b:cd:6f:f0:81:e2:b3:01:f7:44:7f: 0d:00:e2:44:f3:95:db:46:70:07:ca:9d:00:5c:5b:d7:b1:3d: 85:81:6d:8b:c2:e2:69:e9:34:76:02:bd:1d:ab:5f:7a:42:5c: 96:29:29:ab:76:0f:1c:01:a3:c7:01:21:97:2e:65:52:c2:2e: 49:8d:7b:17:61:6a:77:d1:52:96:52:17:da:c3:38:70:ed:7a: c3:ee:2c:5c:34:f9:16:1a:64:17:2a:ca:0d:64:5f:3a:07:89: 53:3b:4a:24:63:2f:a1:bc:79:45:d7:4c:32:7a:69:62:71:e4: c1:9b:39:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKEY3RjlEOEE0MzU1RDY3M0I5RDRFN0YxNTVEM0E3OEU1 RTY2MEZFQTUwHhcNMjQwNTI0MTgxNDE5WhcNMjQwNTMxMTgxNDE5WjAYMRYwFAYD VQQDEw02NjUwZDhmYi02MWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jrD1QaYgwWgPDKwXwgTNEZ8GewtC/HVCNDaFExUEYdSqAdrS5Irbgk0iT7b pjH20bc4df7xJ3ujKBMqBSHRi+b5zZfF0+Uu3BOWlZHeziDuulPWMlP+rJlFwc7l qznz4XjFIxmylcLCZXc3jjRZUBvA40oPYwxsa5/1/xSaOAGfTajKuEqZvZTyXtpd ASNlJnRX59Zyir0bKAEp3yLyUUpBobZWhz1rNdcBQRJdOzJ9q6aVxJ+TpwA7zrJt Fh6W9V28DrzX300/IhdSsofHY5xq8LfvTzEcHmBJFsCdM2ibBBb8gt8ha4VJdZqA kww/stMdB0XZ+8sSxBdXK6lz+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDQkruN blPVpHoqu1MLtl1nprOTMB8GA1UdIwQYMBaAFPf52KQ1XWc7nU5/FV06eOXmYP6l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMTYyRTAzQTNE M0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6dWRUbjhWWFRwNDVlWmdf cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlfbllwRFZkWnp1ZFRuOFZYVHA0NWVaZ19xVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9EMTYyRTAzQTNEM0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6 dWRUbjhWWFRwNDVlWmdfcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXMrfQlJoU1OLv55HWet98yLUL4orBbNtGLCy8F8dmDJUJAAISbpl7 Xa63cYv87R051HV6qdCn9wdG8FJSusNj0PbTboDSPsjHkQyvEEmqNs+ygI/IpnSa dc+j/ashbxvEpg0MU7CTdCNyaNbqJPp9O96WcExi2ZhL390xZjVRezxEl3oPa81v 8IHiswH3RH8NAOJE85XbRnAHyp0AXFvXsT2FgW2LwuJp6TR2Ar0dq196QlyWKSmr dg8cAaPHASGXLmVSwi5JjXsXYWp30VKWUhfawzhw7XrD7ixcNPkWGmQXKsoNZF86 B4lTO0okYy+hvHlF10wyemliceTBmzkf -----END CERTIFICATE-----Generated at Fri May 24 18:40:26 2024 by rpki-client on console-fra.rpki-client.org